Home
Join the Community
Getting Started
Welcome
Join Slack
Be a Splunk Champion
SplunkTrust
Super User Program
Badges
Tell us what you think
Splunk Love
Community Feedback
Learn Splunk
Learning Paths
Training & Certification
Training + Certification Discussions
Training & Certification Blog
AppDynamics Knowledge Base
Share a Tip
Find Answers
Splunk Administration
Getting Data In
Deployment Architecture
Monitoring Splunk
Using Splunk
Splunk Search
Dashboards & Visualizations
Splunk Platform
Splunk Enterprise
Splunk Cloud Platform
Splunk AppDynamics
Apps & Add-ons
Splunk Development
All Apps and Add-ons
Premium Solutions
Splunk Enterprise Security
Splunk Observability Cloud
Splunk ITSI
Splunk SOAR
News & Events
Blog & Announcements
Community Blog
Product News & Announcements
Events and Contests
Tech Talks: Technical Deep Dives
Office Hours: Ask the Experts
User Groups
Resources
.conf25
SplunkBase
Developers
Documentation
Splunk Ideas
Splunk Events
Sign In
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Show
only
|
Search instead for
Do you mean
Getting Data In
×
Are you a member of the Splunk Community?
Sign in or Register
with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Community
Category
Board
Knowledge Base
Users
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Show
only
|
Search instead for
Do you mean
Ask a Question
Find Answers
:
Splunk Administration
:
Getting Data In
:
Re: Why are timestamps parsed correctly for only o...
Solved! Jump to solution
Solution
Mark as New
Bookmark Message
Subscribe to Message
Subscribe to RSS Feed
Permalink
Print
Report Inappropriate Content
Re: Why are timestamps parsed correctly for only one of two inputs? Do TIME_FORMAT & TIME_PREFIX work on a Universal Forwarder?
flle
Path Finder
11-02-2015
07:56 AM
«
Previous Message
Next Message
»
Subject
Author
Karma
Views
Posted
Why are timestamps parsed correctly for only one o...
flle
0
4835
08-05-2015
07:00 AM
Re: Why are timestamps parsed correctly for only o...
flle
0
2899
11-02-2015
07:56 AM
Re: Why are timestamps parsed correctly for only o...
woodcock
0
2898
11-02-2015
05:32 AM
Re: Why are timestamps parsed correctly for only o...
woodcock
0
2898
08-05-2015
09:28 AM
Re: Why are timestamps parsed correctly for only o...
somesoni2
0
2898
08-05-2015
08:37 AM
«
Message Listing
«
Previous Topic
Next Topic
»
Solved! Jump to solution
Mark as New
Bookmark Message
Subscribe to Message
Subscribe to RSS Feed
Permalink
Print
Report Inappropriate Content
Why are timestamps parsed correctly for only one of two inputs? Do TIME_FORMAT & TIME_PREFIX work on a Universal Forwarder?
flle
Path Finder
08-05-2015
07:00 AM
Tags
(5)
Tags:
indexed_extractions
time_format
time_prefix
timestamp
universal-forwarder
Solved! Jump to solution
Solution
Mark as New
Bookmark Message
Subscribe to Message
Subscribe to RSS Feed
Permalink
Print
Report Inappropriate Content
Re: Why are timestamps parsed correctly for only one of two inputs? Do TIME_FORMAT & TIME_PREFIX work on a Universal Forwarder?
flle
Path Finder
11-02-2015
07:56 AM
Solved! Jump to solution
Mark as New
Bookmark Message
Subscribe to Message
Subscribe to RSS Feed
Permalink
Print
Report Inappropriate Content
Re: Why are timestamps parsed correctly for only one of two inputs? Do TIME_FORMAT & TIME_PREFIX work on a Universal Forwarder?
woodcock
Esteemed Legend
11-02-2015
05:32 AM
Solved! Jump to solution
Mark as New
Bookmark Message
Subscribe to Message
Subscribe to RSS Feed
Permalink
Print
Report Inappropriate Content
Re: Why are timestamps parsed correctly for only one of two inputs? Do TIME_FORMAT & TIME_PREFIX work on a Universal Forwarder?
woodcock
Esteemed Legend
08-05-2015
09:28 AM
Solved! Jump to solution
Mark as New
Bookmark Message
Subscribe to Message
Subscribe to RSS Feed
Permalink
Print
Report Inappropriate Content
Re: Why are timestamps parsed correctly for only one of two inputs? Do TIME_FORMAT & TIME_PREFIX work on a Universal Forwarder?
somesoni2
Revered Legend
08-05-2015
08:37 AM
Get Updates on the Splunk Community!
Building Reliable Asset and Identity Frameworks in Splunk ES
Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...
Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting
For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...
Automatic Discovery Part 3: Practical Use Cases
If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...
Read our Community Blog >